DevSecops Consultant

Roles & Responsibilities

Key Responsibilities:

• Infrastructure Provisioning: Setup and manage CI/CD infrastructure, provision and maintain service account(s) per project needs, mange tokens and certificates for tools/apps/services. Server Maintenance, backup and recovery planning for infrastructures and services
• CI/CD Pipeline Setup & Maintenance: Design, implement, and maintain the CI/CD pipelines, create common build platform; setup Jenkins server/ build agents
• Configuration Management: Configuration and maintenance of the environment at each state of the development pipeline
• Monitoring and Logging: Implement pipeline monitoring, alerting and logging to track capacity limit, memory and CPU usage limit; Define and create CI/CD dashboard to track and monitor embedded software build and performance
• Security Integration: Integrate security practices into the software development lifecycle, including vulnerability scanning, code analysis, and compliance checks
• Automation and Scripting: Develop automation scripts and tools to streamline repetitive tasks, improve efficiency, and reduce manual errors in the software development and deployment processes and incorporate compliance checks in the pipeline
• Cloud Security: Implement and enforce security best practices for cloud environments, ensuring robust protection of cloud resources and data
• Collaboration & Communication: Work closely with development,operations, and security teams to foster a security-first mindset and ensure effective communication and collaboration across all stages of the DevSecOps pipeline
• Documentation: Develop and document standard operating procedures and other supporting documentation.
• Project Supports and Mentorship: Provide work estimates and status reports, maintain interaction to ensure assigned tasks are prioritized. Mentor junior engineers and prepare them to be the next generation of technology leaders.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering or equivalent
• 7+ years of experience in DevOps with a strong emphasis on security, preferably prior experience in embedded product development
• Proficiency with DevSecOps tools and technologies such as Jenkins, GitLab, Docker, Kubernetes, Ansible, Terraform, Artifactory
• Strong knowledge of cloud platforms (AWS, Azure, GCP) and their security configurations.
• Experience in build and maintain automation playbook using some of these automation technologies such as ansible, python, PowerShell, Chef (ruby) Terraform (HCL), groovy, JavaScript, and other scripting languages
• Hand-on experience in designing, developing and migrating CI/CD pipelines
• Experience in VMware virtualization products such as VMware vSpher, VMware ESXi and VMware vCenter
• Knowledge of security frameworks and standards (e.g., OWASP, NIST, IEC 62443)
• Strong understanding of network security, data encryption techniques, and secure coding practices
• Excellent understanding of Software Development Life Cycle, Continuous Integration and Continuous Delivery
• Strong problem-solving skills and ability to think creatively to find solutions to complex problems
• Ability to collaborate effectively with cross-functional teams, including developers, test engineers, and business stakeholders
• Strong communication skills, both verbal and written, with the ability to explain technical concepts to non-technical stakeholders
• Ability to manage time effectively and prioritize tasks to meet deadlines
• Flexibility and adaptability to changing priorities and requirements
• Attention to detail and a commitment to producing high-quality work
• Comfortable with Agile methodologies

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

Tell employers what skills you have

Vmware Esxi
Terraform
Groovy
Vulnerability Scanning
Embedded Software
DevOps
VMware vCenter
Agile Methodologies
Scripting
Artifactory
Mentorship
Logging
Configuration Management
Encryption

---